[v15] [kube] fix greedy deny rule blocking namespace list when blocking other resources#44975